Static task
static1
Behavioral task
behavioral1
Sample
7735f2b0c766cf45f9bda46c9610e157_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7735f2b0c766cf45f9bda46c9610e157_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7735f2b0c766cf45f9bda46c9610e157_JaffaCakes118
-
Size
180KB
-
MD5
7735f2b0c766cf45f9bda46c9610e157
-
SHA1
bffd0702721308de44fa44f629c3c925bb47fc52
-
SHA256
e373e36f4e98baf199f8b88a8183e4e8317c729e6ae42db940499f9854fb1ef8
-
SHA512
68a0b205f1310b37c995586e0db215cfcf96ecefa6df772e000a90d6d4ddff30ee9b0c0cf6c6fda4a9bab3e44e55acfafe039cf994c840d492ff7c69b1b3ee21
-
SSDEEP
3072:3pR/j8Mui4vNaJZEVU67FC52k99geYK4W6mHHvv7VCirTcmS5AIg0u:5ecdZElQ52klB4WLH7785dc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7735f2b0c766cf45f9bda46c9610e157_JaffaCakes118
Files
-
7735f2b0c766cf45f9bda46c9610e157_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 258KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE